Analysis
-
max time kernel
92s -
max time network
204s -
platform
windows11-21h2_x64 -
resource
win11-20240802-en -
resource tags
-
submitted
15-09-2024 05:46
General
-
Target
ZoraraUI.exe.WebView2/EBWebView/hyphen-data/101.0.4906.0/hyph-kn.hyb
-
Size
711B
-
MD5
d986ac2e7c75cf3ef929a7a269ae0d5a
-
SHA1
de8bf2ee2b8a77102337c45e5fec924c6c02355b
-
SHA256
2b999d0a152f804601aa8f38ff0d3a6e5949977bf1daa76fa888acae21526287
-
SHA512
5475c82fd5074334bc5f0f89edab62e94bc5865da0432c6f830b50db3045afda12bb698659951f6d0f76c55a43e1add8d47ad7fd03597bbe92d8178ad4783c71
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Modifies registry class 2 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Windows\system32\cmd.execmd /c C:\Users\Admin\AppData\Local\Temp\ZoraraUI.exe.WebView2\EBWebView\hyphen-data\101.0.4906.0\hyph-kn.hyb1⤵
- Modifies registry class
-
C:\Windows\system32\OpenWith.exeC:\Windows\system32\OpenWith.exe -Embedding1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx